Lucene search
+L

7 matches found

NVD
NVD
added 2026/08/20 5:19 p.m.10 views

CVE-2026-77019

A vulnerability was determined in CodeAstro Apartment Visitor Management System 1.0. Affected is an unknown function of the file /apartment-visitor/forgotpw.php. Executing a manipulation of the argument secode can lead to sql injection. The attack may be launched remotely. The exploit has been...

7.5CVSS0.00263EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/20 4:15 p.m.31 views

CVE-2026-77019 CodeAstro Apartment Visitor Management System forgotpw.php sql injection

A vulnerability was determined in CodeAstro Apartment Visitor Management System 1.0. Affected is an unknown function of the file /apartment-visitor/forgotpw.php. Executing a manipulation of the argument secode can lead to sql injection. The attack may be launched remotely. The exploit has been...

7.5CVSS0.00263EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/08/20 4:15 p.m.14 views

EUVD-2026-63421

A vulnerability was determined in CodeAstro Apartment Visitor Management System 1.0. Affected is an unknown function of the file /apartment-visitor/forgotpw.php. Executing a manipulation of the argument secode can lead to sql injection. The attack may be launched remotely. The exploit has been...

7.5CVSS5.5AI score0.00263EPSS
SaveExploits0References6
CVE
CVE
added 2026/08/20 4:15 p.m.25 views

CVE-2026-77019

CodeAstro Apartment Visitor Management System 1.0 has a SQL injection in /apartment-visitor/forgotpw.php via the secode argument, exploitable remotely without authentication (CVSS 7.5 HIGH). A proof-of-concept exploit is publicly disclosed; no patch version is provided. Exploitation details are n...

7.5CVSS7.3AI score0.00263EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/08/20 12:00 a.m.21 views

PT-2026-79056

A vulnerability was determined in CodeAstro Apartment Visitor Management System 1.0. Affected is an unknown function of the file /apartment-visitor/forgotpw.php. Executing a manipulation of the argument secode can lead to sql injection. The attack may be launched remotely. The exploit has been...

7.5CVSS7.3AI score0.00263EPSS
SaveExploits0References7
CVE
CVE
added 2025/04/06 8:31 a.m.73 views

CVE-2025-3314

CVE-2025-3314 affects SourceCodester Apartment Visitor Management System 1.0. The vulnerability lies in the /forgotpw.php handler, where the query parameter “secode” is improperly processed, leading to SQL injection. This enables remote attackers to influence the database without authentication. ...

9.8CVSS7.5AI score0.00555EPSS
SaveExploits1References5Affected Software1
Openbugbounty
Openbugbounty
added 2015/11/08 12:35 p.m.14 views

ms11.net XSS vulnerability

Vulnerable URL: http://www.ms11.net/login/forgotpw.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 828008 Google Pagerank| 3 VIP website status:| No Check ms11.net SSL...

6.3AI score
SaveExploits0
Rows per page
Query Builder